@authup/server-core 1.0.0-beta.51 → 1.0.0-beta.52

package/dist/adapters/database/data-source/options/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/data-source/options/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AA6DjD,qBAAa,wBAAwB;IACjC,YAAY;IAUZ,SAAS,CAAC,OAAO,EAAE,iBAAiB;IAMpC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,GAAI,iBAAiB;CA+GtE"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/data-source/options/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AA8DjD,qBAAa,wBAAwB;IACjC,YAAY;IAUZ,SAAS,CAAC,OAAO,EAAE,iBAAiB;IAMpC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,GAAI,iBAAiB;CAgHtE"}

package/dist/adapters/database/data-source/options/module.mjs

@@ -40,6 +40,7 @@ import { IdentityProviderRoleSubscriber } from "../../domains/identity-provider-
 import { RobotEntity } from "../../domains/robot/entity.mjs";
 import { RobotSubscriber } from "../../domains/robot/subscriber.mjs";
 import { SessionEntity } from "../../domains/session/entity.mjs";
+import { SessionTokenEntity } from "../../domains/session-token/entity.mjs";
 import { PermissionPolicyEntity } from "../../domains/permission-policy/entity.mjs";
 import { RobotPermissionEntity } from "../../domains/robot-permission/entity.mjs";
 import { RobotPermissionSubscriber } from "../../domains/robot-permission/subscriber.mjs";
@@ -74,6 +75,7 @@ var DataSourceOptionsBuilder = class {
 				...options.entities ? options.entities : [],
 				KeyEntity,
 				SessionEntity,
+				SessionTokenEntity,
 				ClientEntity,
 				ClientPermissionEntity,
 				ClientRoleEntity,

package/dist/adapters/database/data-source/options/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["AuthupError","CodeTransformation","isCodeTransformation","readDataSourceOptionsFromEnv","transformFilePath","ClientEntity","ClientPermissionEntity","ClientPermissionSubscriber","ClientRoleEntity","ClientRoleSubscriber","ClientScopeEntity","ClientScopeSubscriber","ClientSubscriber","IdentityProviderAccountEntity","IdentityProviderAccountSubscriber","IdentityProviderAttributeEntity","IdentityProviderAttributeMappingEntity","IdentityProviderAttributeSubscriber","IdentityProviderEntity","IdentityProviderPermissionMappingEntity","IdentityProviderRoleMappingEntity","IdentityProviderRoleSubscriber","IdentityProviderSubscriber","KeyEntity","PermissionEntity","PermissionPolicyEntity","PermissionSubscriber","PolicyAttributeEntity","PolicyAttributeSubscriber","PolicyEntity","PolicySubscriber","RealmEntity","RealmSubscriber","RobotEntity","RobotPermissionEntity","RobotPermissionSubscriber","RobotRoleEntity","RobotRoleSubscriber","RobotSubscriber","RoleAttributeEntity","RoleAttributeSubscriber","RoleEntity","RolePermissionEntity","RolePermissionSubscriber","RoleSubscriber","ScopeEntity","ScopeSubscriber","SessionEntity","UserAttributeEntity","UserAttributeSubscriber","UserEntity","UserPermissionEntity","UserPermissionSubscriber","UserRoleEntity","UserRoleSubscriber","UserSubscriber","DataSourceOptionsBuilder","buildWithEnv","options","normalize","buildWith","type","logging","entities","migrations","migrationsTransactionMode","subscribers","migrationPath","JUST_IN_TIME","Object","assign","connectorPackage"],"sources":["../../../../../src/adapters/database/data-source/options/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport type { DataSourceOptions } from 'typeorm';\nimport {\n    CodeTransformation, \n    isCodeTransformation, \n    readDataSourceOptionsFromEnv, \n    transformFilePath,\n} from 'typeorm-extension';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientPermissionSubscriber,\n    ClientRoleEntity,\n    ClientRoleSubscriber,\n    ClientScopeEntity,\n    ClientScopeSubscriber,\n    ClientSubscriber,\n    IdentityProviderAccountEntity,\n    IdentityProviderAccountSubscriber,\n    IdentityProviderAttributeEntity,\n    IdentityProviderAttributeMappingEntity,\n    IdentityProviderAttributeSubscriber,\n    IdentityProviderEntity,\n    IdentityProviderPermissionMappingEntity,\n    IdentityProviderRoleMappingEntity,\n    IdentityProviderRoleSubscriber,\n    IdentityProviderSubscriber,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PermissionSubscriber,\n    PolicyAttributeEntity,\n    PolicyAttributeSubscriber,\n    PolicyEntity,\n    PolicySubscriber,\n    RealmEntity,\n    RealmSubscriber,\n    RobotEntity,\n    RobotPermissionEntity,\n    RobotPermissionSubscriber,\n    RobotRoleEntity,\n    RobotRoleSubscriber,\n    RobotSubscriber,\n    RoleAttributeEntity,\n    RoleAttributeSubscriber,\n    RoleEntity,\n    RolePermissionEntity,\n    RolePermissionSubscriber,\n    RoleSubscriber,\n    ScopeEntity,\n    ScopeSubscriber,\n    SessionEntity,\n    UserAttributeEntity,\n    UserAttributeSubscriber,\n    UserEntity,\n    UserPermissionEntity,\n    UserPermissionSubscriber,\n    UserRoleEntity,\n    UserRoleSubscriber,\n    UserSubscriber,\n} from '../../domains/index.ts';\n\nexport class DataSourceOptionsBuilder {\n    buildWithEnv() {\n        const options = readDataSourceOptionsFromEnv();\n\n        if (!options) {\n            throw new AuthupError('The database configuration could not be read from env variables.');\n        }\n\n        return this.normalize(options);\n    }\n\n    buildWith(options: DataSourceOptions) {\n        return this.normalize(options);\n    }\n\n    // ------------------------------------------------------------------\n\n    protected normalize(options: DataSourceOptions) : DataSourceOptions {\n        if (\n            options.type !== 'mysql' &&\n            options.type !== 'postgres' &&\n            options.type !== 'better-sqlite3'\n        ) {\n            throw new AuthupError(`The database type ${options.type} is not supported.`);\n        }\n\n        options = {\n            ...options,\n            logging: false,\n            entities: [\n                ...(options.entities ? options.entities : []) as string[],\n                KeyEntity,\n\n                SessionEntity,\n\n                ClientEntity,\n                ClientPermissionEntity,\n                ClientRoleEntity,\n                ClientScopeEntity,\n\n                IdentityProviderEntity,\n                IdentityProviderAttributeEntity,\n                IdentityProviderAccountEntity,\n                IdentityProviderRoleMappingEntity,\n                IdentityProviderPermissionMappingEntity,\n                IdentityProviderAttributeMappingEntity,\n\n                PermissionEntity,\n                PermissionPolicyEntity,\n\n                PolicyEntity,\n                PolicyAttributeEntity,\n\n                RealmEntity,\n\n                RobotEntity,\n                RobotPermissionEntity,\n                RobotRoleEntity,\n\n                RoleEntity,\n                RoleAttributeEntity,\n                RolePermissionEntity,\n\n                ScopeEntity,\n\n                UserEntity,\n                UserAttributeEntity,\n                UserPermissionEntity,\n                UserRoleEntity,\n            ],\n            migrations: [],\n            migrationsTransactionMode: 'each',\n            subscribers: [\n                ...(options.subscribers || []) as string[],\n                ClientSubscriber,\n                ClientPermissionSubscriber,\n                ClientRoleSubscriber,\n                ClientScopeSubscriber,\n\n                IdentityProviderSubscriber,\n                IdentityProviderAccountSubscriber,\n                IdentityProviderAttributeSubscriber,\n                IdentityProviderRoleSubscriber,\n\n                PermissionSubscriber,\n                PolicySubscriber,\n                PolicyAttributeSubscriber,\n\n                RealmSubscriber,\n\n                RobotSubscriber,\n                RobotRoleSubscriber,\n                RobotPermissionSubscriber,\n\n                RoleSubscriber,\n                RoleAttributeSubscriber,\n                RolePermissionSubscriber,\n\n                ScopeSubscriber,\n\n                UserSubscriber,\n                UserAttributeSubscriber,\n                UserPermissionSubscriber,\n                UserRoleSubscriber,\n            ],\n        };\n\n        if (\n            options.type === 'mysql' ||\n            options.type === 'postgres'\n        ) {\n            let migrationPath = `src/adapters/database/migrations/${options.type}/*.{ts,js,mjs}`;\n            if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {\n                migrationPath = transformFilePath(migrationPath, './dist', './src');\n            }\n\n            Object.assign(options, {\n                migrations: [migrationPath],\n                migrationsTransactionMode: 'all',\n            } as DataSourceOptions);\n        }\n\n        if (options.type === 'mysql') {\n            Object.assign(options, { connectorPackage: 'mysql2' } satisfies Partial<DataSourceOptions>);\n        }\n\n        return options;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqEA,IAAawD,2BAAb,MAAaA;CACTC,eAAe;EACX,MAAMC,UAAUvD,6BAAAA;EAEhB,IAAI,CAACuD,SACD,MAAM,IAAI1D,YAAY,kEAAA;EAG1B,OAAO,KAAK2D,UAAUD,OAAAA;CAC1B;CAEAE,UAAUF,SAA4B;EAClC,OAAO,KAAKC,UAAUD,OAAAA;CAC1B;CAIUC,UAAUD,SAAgD;EAChE,IACIA,QAAQG,SAAS,WACjBH,QAAQG,SAAS,cACjBH,QAAQG,SAAS,kBAEjB,MAAM,IAAI7D,YAAY,qBAAqB0D,QAAQG,KAAK,mBAAmB;EAG/EH,UAAU;GACN,GAAGA;GACHI,SAAS;GACTC,UAAU;OACFL,QAAQK,WAAWL,QAAQK,WAAW,CAAA;IAC1CxC;IAEAwB;IAEA1C;IACAC;IACAE;IACAE;IAEAQ;IACAH;IACAF;IACAO;IACAD;IACAH;IAEAQ;IACAC;IAEAI;IACAF;IAEAI;IAEAE;IACAC;IACAE;IAEAK;IACAF;IACAG;IAEAG;IAEAK;IACAF;IACAG;IACAE;;GAEJW,YAAY,CAAA;GACZC,2BAA2B;GAC3BC,aAAa;OACLR,QAAQQ,eAAe,CAAA;IAC3BtD;IACAL;IACAE;IACAE;IAEAW;IACAR;IACAG;IACAI;IAEAK;IACAI;IACAF;IAEAI;IAEAM;IACAD;IACAF;IAEAS;IACAJ;IACAG;IAEAG;IAEAS;IACAN;IACAG;IACAE;;EAER;EAEA,IACII,QAAQG,SAAS,WACjBH,QAAQG,SAAS,YACnB;GACE,IAAIM,gBAAgB,oCAAoCT,QAAQG,KAAK;GACrE,IAAI,CAAC3D,qBAAqBD,mBAAmBmE,YAAY,GACrDD,gBAAgB/D,kBAAkB+D,eAAe,UAAU,OAAA;GAG/DE,OAAOC,OAAOZ,SAAS;IACnBM,YAAY,CAACG,aAAAA;IACbF,2BAA2B;GAC/B,CAAA;EACJ;EAEA,IAAIP,QAAQG,SAAS,SACjBQ,OAAOC,OAAOZ,SAAS,EAAEa,kBAAkB,SAAS,CAAA;EAGxD,OAAOb;CACX;AACJ"}
+{"version":3,"file":"module.mjs","names":["AuthupError","CodeTransformation","isCodeTransformation","readDataSourceOptionsFromEnv","transformFilePath","ClientEntity","ClientPermissionEntity","ClientPermissionSubscriber","ClientRoleEntity","ClientRoleSubscriber","ClientScopeEntity","ClientScopeSubscriber","ClientSubscriber","IdentityProviderAccountEntity","IdentityProviderAccountSubscriber","IdentityProviderAttributeEntity","IdentityProviderAttributeMappingEntity","IdentityProviderAttributeSubscriber","IdentityProviderEntity","IdentityProviderPermissionMappingEntity","IdentityProviderRoleMappingEntity","IdentityProviderRoleSubscriber","IdentityProviderSubscriber","KeyEntity","PermissionEntity","PermissionPolicyEntity","PermissionSubscriber","PolicyAttributeEntity","PolicyAttributeSubscriber","PolicyEntity","PolicySubscriber","RealmEntity","RealmSubscriber","RobotEntity","RobotPermissionEntity","RobotPermissionSubscriber","RobotRoleEntity","RobotRoleSubscriber","RobotSubscriber","RoleAttributeEntity","RoleAttributeSubscriber","RoleEntity","RolePermissionEntity","RolePermissionSubscriber","RoleSubscriber","ScopeEntity","ScopeSubscriber","SessionEntity","SessionTokenEntity","UserAttributeEntity","UserAttributeSubscriber","UserEntity","UserPermissionEntity","UserPermissionSubscriber","UserRoleEntity","UserRoleSubscriber","UserSubscriber","DataSourceOptionsBuilder","buildWithEnv","options","normalize","buildWith","type","logging","entities","migrations","migrationsTransactionMode","subscribers","migrationPath","JUST_IN_TIME","Object","assign","connectorPackage"],"sources":["../../../../../src/adapters/database/data-source/options/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport type { DataSourceOptions } from 'typeorm';\nimport {\n    CodeTransformation, \n    isCodeTransformation, \n    readDataSourceOptionsFromEnv, \n    transformFilePath,\n} from 'typeorm-extension';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientPermissionSubscriber,\n    ClientRoleEntity,\n    ClientRoleSubscriber,\n    ClientScopeEntity,\n    ClientScopeSubscriber,\n    ClientSubscriber,\n    IdentityProviderAccountEntity,\n    IdentityProviderAccountSubscriber,\n    IdentityProviderAttributeEntity,\n    IdentityProviderAttributeMappingEntity,\n    IdentityProviderAttributeSubscriber,\n    IdentityProviderEntity,\n    IdentityProviderPermissionMappingEntity,\n    IdentityProviderRoleMappingEntity,\n    IdentityProviderRoleSubscriber,\n    IdentityProviderSubscriber,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PermissionSubscriber,\n    PolicyAttributeEntity,\n    PolicyAttributeSubscriber,\n    PolicyEntity,\n    PolicySubscriber,\n    RealmEntity,\n    RealmSubscriber,\n    RobotEntity,\n    RobotPermissionEntity,\n    RobotPermissionSubscriber,\n    RobotRoleEntity,\n    RobotRoleSubscriber,\n    RobotSubscriber,\n    RoleAttributeEntity,\n    RoleAttributeSubscriber,\n    RoleEntity,\n    RolePermissionEntity,\n    RolePermissionSubscriber,\n    RoleSubscriber,\n    ScopeEntity,\n    ScopeSubscriber,\n    SessionEntity,\n    SessionTokenEntity,\n    UserAttributeEntity,\n    UserAttributeSubscriber,\n    UserEntity,\n    UserPermissionEntity,\n    UserPermissionSubscriber,\n    UserRoleEntity,\n    UserRoleSubscriber,\n    UserSubscriber,\n} from '../../domains/index.ts';\n\nexport class DataSourceOptionsBuilder {\n    buildWithEnv() {\n        const options = readDataSourceOptionsFromEnv();\n\n        if (!options) {\n            throw new AuthupError('The database configuration could not be read from env variables.');\n        }\n\n        return this.normalize(options);\n    }\n\n    buildWith(options: DataSourceOptions) {\n        return this.normalize(options);\n    }\n\n    // ------------------------------------------------------------------\n\n    protected normalize(options: DataSourceOptions) : DataSourceOptions {\n        if (\n            options.type !== 'mysql' &&\n            options.type !== 'postgres' &&\n            options.type !== 'better-sqlite3'\n        ) {\n            throw new AuthupError(`The database type ${options.type} is not supported.`);\n        }\n\n        options = {\n            ...options,\n            logging: false,\n            entities: [\n                ...(options.entities ? options.entities : []) as string[],\n                KeyEntity,\n\n                SessionEntity,\n                SessionTokenEntity,\n\n                ClientEntity,\n                ClientPermissionEntity,\n                ClientRoleEntity,\n                ClientScopeEntity,\n\n                IdentityProviderEntity,\n                IdentityProviderAttributeEntity,\n                IdentityProviderAccountEntity,\n                IdentityProviderRoleMappingEntity,\n                IdentityProviderPermissionMappingEntity,\n                IdentityProviderAttributeMappingEntity,\n\n                PermissionEntity,\n                PermissionPolicyEntity,\n\n                PolicyEntity,\n                PolicyAttributeEntity,\n\n                RealmEntity,\n\n                RobotEntity,\n                RobotPermissionEntity,\n                RobotRoleEntity,\n\n                RoleEntity,\n                RoleAttributeEntity,\n                RolePermissionEntity,\n\n                ScopeEntity,\n\n                UserEntity,\n                UserAttributeEntity,\n                UserPermissionEntity,\n                UserRoleEntity,\n            ],\n            migrations: [],\n            migrationsTransactionMode: 'each',\n            subscribers: [\n                ...(options.subscribers || []) as string[],\n                ClientSubscriber,\n                ClientPermissionSubscriber,\n                ClientRoleSubscriber,\n                ClientScopeSubscriber,\n\n                IdentityProviderSubscriber,\n                IdentityProviderAccountSubscriber,\n                IdentityProviderAttributeSubscriber,\n                IdentityProviderRoleSubscriber,\n\n                PermissionSubscriber,\n                PolicySubscriber,\n                PolicyAttributeSubscriber,\n\n                RealmSubscriber,\n\n                RobotSubscriber,\n                RobotRoleSubscriber,\n                RobotPermissionSubscriber,\n\n                RoleSubscriber,\n                RoleAttributeSubscriber,\n                RolePermissionSubscriber,\n\n                ScopeSubscriber,\n\n                UserSubscriber,\n                UserAttributeSubscriber,\n                UserPermissionSubscriber,\n                UserRoleSubscriber,\n            ],\n        };\n\n        if (\n            options.type === 'mysql' ||\n            options.type === 'postgres'\n        ) {\n            let migrationPath = `src/adapters/database/migrations/${options.type}/*.{ts,js,mjs}`;\n            if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {\n                migrationPath = transformFilePath(migrationPath, './dist', './src');\n            }\n\n            Object.assign(options, {\n                migrations: [migrationPath],\n                migrationsTransactionMode: 'all',\n            } as DataSourceOptions);\n        }\n\n        if (options.type === 'mysql') {\n            Object.assign(options, { connectorPackage: 'mysql2' } satisfies Partial<DataSourceOptions>);\n        }\n\n        return options;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEA,IAAayD,2BAAb,MAAaA;CACTC,eAAe;EACX,MAAMC,UAAUxD,6BAAAA;EAEhB,IAAI,CAACwD,SACD,MAAM,IAAI3D,YAAY,kEAAA;EAG1B,OAAO,KAAK4D,UAAUD,OAAAA;CAC1B;CAEAE,UAAUF,SAA4B;EAClC,OAAO,KAAKC,UAAUD,OAAAA;CAC1B;CAIUC,UAAUD,SAAgD;EAChE,IACIA,QAAQG,SAAS,WACjBH,QAAQG,SAAS,cACjBH,QAAQG,SAAS,kBAEjB,MAAM,IAAI9D,YAAY,qBAAqB2D,QAAQG,KAAK,mBAAmB;EAG/EH,UAAU;GACN,GAAGA;GACHI,SAAS;GACTC,UAAU;OACFL,QAAQK,WAAWL,QAAQK,WAAW,CAAA;IAC1CzC;IAEAwB;IACAC;IAEA3C;IACAC;IACAE;IACAE;IAEAQ;IACAH;IACAF;IACAO;IACAD;IACAH;IAEAQ;IACAC;IAEAI;IACAF;IAEAI;IAEAE;IACAC;IACAE;IAEAK;IACAF;IACAG;IAEAG;IAEAM;IACAF;IACAG;IACAE;;GAEJW,YAAY,CAAA;GACZC,2BAA2B;GAC3BC,aAAa;OACLR,QAAQQ,eAAe,CAAA;IAC3BvD;IACAL;IACAE;IACAE;IAEAW;IACAR;IACAG;IACAI;IAEAK;IACAI;IACAF;IAEAI;IAEAM;IACAD;IACAF;IAEAS;IACAJ;IACAG;IAEAG;IAEAU;IACAN;IACAG;IACAE;;EAER;EAEA,IACII,QAAQG,SAAS,WACjBH,QAAQG,SAAS,YACnB;GACE,IAAIM,gBAAgB,oCAAoCT,QAAQG,KAAK;GACrE,IAAI,CAAC5D,qBAAqBD,mBAAmBoE,YAAY,GACrDD,gBAAgBhE,kBAAkBgE,eAAe,UAAU,OAAA;GAG/DE,OAAOC,OAAOZ,SAAS;IACnBM,YAAY,CAACG,aAAAA;IACbF,2BAA2B;GAC/B,CAAA;EACJ;EAEA,IAAIP,QAAQG,SAAS,SACjBQ,OAAOC,OAAOZ,SAAS,EAAEa,kBAAkB,SAAS,CAAA;EAGxD,OAAOb;CACX;AACJ"}

package/dist/adapters/database/domains/client/entity.d.ts

@@ -12,6 +12,7 @@ export declare class ClientEntity implements Client {
     secret_hashed: boolean;
     secret_encrypted: boolean;
     redirect_uri: string | null;
+    post_logout_redirect_uri: string | null;
     grant_types: string | null;
     scope: string | null;
     base_url: string | null;

package/dist/adapters/database/domains/client/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/client/entity.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,qBAEa,YAAa,YAAW,MAAM;IAEvC,EAAE,EAAE,MAAM,CAAC;IAQX,MAAM,EAAE,OAAO,CAAC;IAMhB,QAAQ,EAAE,OAAO,CAAC;IAMlB,eAAe,EAAE,OAAO,CAAC;IAQzB,IAAI,EAAE,MAAM,CAAC;IAOb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAM5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAU3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAMtB,aAAa,EAAE,OAAO,CAAC;IAMvB,gBAAgB,EAAE,OAAO,CAAC;IAQ1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAO5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAOrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAOxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAKxB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAKnB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAItB,KAAK,EAAE,WAAW,CAAC;IAMnB,cAAc;CAQjB"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/client/entity.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,qBAEa,YAAa,YAAW,MAAM;IAEvC,EAAE,EAAE,MAAM,CAAC;IAQX,MAAM,EAAE,OAAO,CAAC;IAMhB,QAAQ,EAAE,OAAO,CAAC;IAMlB,eAAe,EAAE,OAAO,CAAC;IAQzB,IAAI,EAAE,MAAM,CAAC;IAOb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAM5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAU3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAMtB,aAAa,EAAE,OAAO,CAAC;IAMvB,gBAAgB,EAAE,OAAO,CAAC;IAQ1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAS5B,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IAOxC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAOrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAOxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAKxB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAKnB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAItB,KAAK,EAAE,WAAW,CAAC;IAMnB,cAAc;CAQjB"}

package/dist/adapters/database/domains/client/entity.mjs

@@ -28,6 +28,7 @@ var ClientEntity = class {
 	secret_hashed;
 	secret_encrypted;
 	redirect_uri;
+	post_logout_redirect_uri;
 	grant_types;
 	scope;
 	base_url;
@@ -84,6 +85,10 @@ _ts_decorate([Column({
 	type: "text",
 	nullable: true
 }), _ts_metadata("design:type", Object)], ClientEntity.prototype, "redirect_uri", void 0);
+_ts_decorate([Column({
+	type: "text",
+	nullable: true
+}), _ts_metadata("design:type", Object)], ClientEntity.prototype, "post_logout_redirect_uri", void 0);
 _ts_decorate([Column({
 	type: "varchar",
 	length: 512,

package/dist/adapters/database/domains/client/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["BeforeInsert","BeforeUpdate","Column","CreateDateColumn","Entity","JoinColumn","ManyToOne","PrimaryGeneratedColumn","Unique","UpdateDateColumn","dateToISOStringTransformer","RealmEntity","ClientEntity","id","active","built_in","is_confidential","name","display_name","description","secret","secret_hashed","secret_encrypted","redirect_uri","grant_types","scope","base_url","root_url","created_at","updated_at","realm_id","realm","setDisplayName","length","type","default","nullable","select","transformer","onDelete"],"sources":["../../../../../src/adapters/database/domains/client/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    BeforeInsert, \n    BeforeUpdate,\n    Column,\n    CreateDateColumn,\n    Entity,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    Unique,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type { Client, Realm } from '@authup/core-kit';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_clients' })\n@Unique(['name', 'realm_id'])\nexport class ClientEntity implements Client {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'boolean',\n        default: true,\n    })\n    active: boolean;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    built_in: boolean;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    is_confidential: boolean;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 256,\n    })\n    name: string;\n\n    @Column({\n        type: 'varchar',\n        length: 256,\n        nullable: true, \n    })\n    display_name: string | null;\n\n    @Column({\n        type: 'text',\n        nullable: true,\n    })\n    description: string | null;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 256,\n        select: false,\n        nullable: true,\n    })\n    secret: string | null;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    secret_hashed: boolean;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    secret_encrypted: boolean;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'text',\n        nullable: true,\n    })\n    redirect_uri: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 512,\n        nullable: true,\n    })\n    grant_types: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 512,\n        nullable: true,\n        default: null,\n    })\n    scope: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 2000,\n        nullable: true,\n    })\n    base_url: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 2000,\n        nullable: true,\n    })\n    root_url: string | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n\n    // ------------------------------------------------------------------\n\n    @BeforeInsert()\n    @BeforeUpdate()\n    setDisplayName() {\n        if (\n            typeof this.display_name !== 'string' ||\n            this.display_name.length === 0\n        ) {\n            this.display_name = this.name;\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,IAAaY,eAAb,MAAaA;CAETC;CAQAC;CAMAC;CAMAC;CAQAC;CAOAC;CAMAC;CAUAC;CAMAC;CAMAC;CAQAC;CAOAC;CAQAC;CAOAC;CAOAC;CAKAC;CAGAC;CAKAC;CAIAC;CAMAC,iBAAiB;EACb,IACI,OAAO,KAAKd,iBAAiB,YAC7B,KAAKA,aAAae,WAAW,GAE7B,KAAKf,eAAe,KAAKD;CAEjC;AACJ;;;CA9HQiB,MAAM;CACNC,SAAS;;;CAKTD,MAAM;CACNC,SAAS;;;CAKTD,MAAM;CACNC,SAAS;;;CAOTD,MAAM;CACND,QAAQ;;;CAKRC,MAAM;CACND,QAAQ;CACRG,UAAU;;;CAKVF,MAAM;CACNE,UAAU;;;CAOVF,MAAM;CACND,QAAQ;CACRI,QAAQ;CACRD,UAAU;;;CAKVF,MAAM;CACNC,SAAS;;;CAKTD,MAAM;CACNC,SAAS;;;CAOTD,MAAM;CACNE,UAAU;;;CAKVF,MAAM;CACND,QAAQ;CACRG,UAAU;;;CAKVF,MAAM;CACND,QAAQ;CACRG,UAAU;CACVD,SAAS;;;CAKTD,MAAM;CACND,QAAQ;CACRG,UAAU;;;CAKVF,MAAM;CACND,QAAQ;CACRG,UAAU;;iCAMME,aAAa5B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,aAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb4B,aAAa5B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,aAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;;iBAQhBC,aAAAA,EAAe4B,UAAU,UAAA,CAAA;cAC5BtB,MAAM,WAAA,CAAA;;;;;;;;;;sCAxHdA,MAAM,eAAA,CAAA,GAAA,OAAA,CACP,QAAQ,UAAA,CAAA,CAAA,GAAA,YAAA"}
+{"version":3,"file":"entity.mjs","names":["BeforeInsert","BeforeUpdate","Column","CreateDateColumn","Entity","JoinColumn","ManyToOne","PrimaryGeneratedColumn","Unique","UpdateDateColumn","dateToISOStringTransformer","RealmEntity","ClientEntity","id","active","built_in","is_confidential","name","display_name","description","secret","secret_hashed","secret_encrypted","redirect_uri","post_logout_redirect_uri","grant_types","scope","base_url","root_url","created_at","updated_at","realm_id","realm","setDisplayName","length","type","default","nullable","select","transformer","onDelete"],"sources":["../../../../../src/adapters/database/domains/client/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    BeforeInsert, \n    BeforeUpdate,\n    Column,\n    CreateDateColumn,\n    Entity,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    Unique,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type { Client, Realm } from '@authup/core-kit';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_clients' })\n@Unique(['name', 'realm_id'])\nexport class ClientEntity implements Client {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'boolean',\n        default: true,\n    })\n    active: boolean;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    built_in: boolean;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    is_confidential: boolean;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 256,\n    })\n    name: string;\n\n    @Column({\n        type: 'varchar',\n        length: 256,\n        nullable: true, \n    })\n    display_name: string | null;\n\n    @Column({\n        type: 'text',\n        nullable: true,\n    })\n    description: string | null;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 256,\n        select: false,\n        nullable: true,\n    })\n    secret: string | null;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    secret_hashed: boolean;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    secret_encrypted: boolean;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'text',\n        nullable: true,\n    })\n    redirect_uri: string | null;\n\n    // `text` (not varchar) to match `redirect_uri` — the provisioner writes the\n    // same origin-pattern string to both, so a large trusted-origin set must\n    // not overflow only this column.\n    @Column({\n        type: 'text',\n        nullable: true,\n    })\n    post_logout_redirect_uri: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 512,\n        nullable: true,\n    })\n    grant_types: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 512,\n        nullable: true,\n        default: null,\n    })\n    scope: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 2000,\n        nullable: true,\n    })\n    base_url: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 2000,\n        nullable: true,\n    })\n    root_url: string | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n\n    // ------------------------------------------------------------------\n\n    @BeforeInsert()\n    @BeforeUpdate()\n    setDisplayName() {\n        if (\n            typeof this.display_name !== 'string' ||\n            this.display_name.length === 0\n        ) {\n            this.display_name = this.name;\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,IAAaY,eAAb,MAAaA;CAETC;CAQAC;CAMAC;CAMAC;CAQAC;CAOAC;CAMAC;CAUAC;CAMAC;CAMAC;CAQAC;CASAC;CAOAC;CAQAC;CAOAC;CAOAC;CAKAC;CAGAC;CAKAC;CAIAC;CAMAC,iBAAiB;EACb,IACI,OAAO,KAAKf,iBAAiB,YAC7B,KAAKA,aAAagB,WAAW,GAE7B,KAAKhB,eAAe,KAAKD;CAEjC;AACJ;;;CAvIQkB,MAAM;CACNC,SAAS;;;CAKTD,MAAM;CACNC,SAAS;;;CAKTD,MAAM;CACNC,SAAS;;;CAOTD,MAAM;CACND,QAAQ;;;CAKRC,MAAM;CACND,QAAQ;CACRG,UAAU;;;CAKVF,MAAM;CACNE,UAAU;;;CAOVF,MAAM;CACND,QAAQ;CACRI,QAAQ;CACRD,UAAU;;;CAKVF,MAAM;CACNC,SAAS;;;CAKTD,MAAM;CACNC,SAAS;;;CAOTD,MAAM;CACNE,UAAU;;;CAQVF,MAAM;CACNE,UAAU;;;CAKVF,MAAM;CACND,QAAQ;CACRG,UAAU;;;CAKVF,MAAM;CACND,QAAQ;CACRG,UAAU;CACVD,SAAS;;;CAKTD,MAAM;CACND,QAAQ;CACRG,UAAU;;;CAKVF,MAAM;CACND,QAAQ;CACRG,UAAU;;iCAMME,aAAa7B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,aAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb6B,aAAa7B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,aAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;;iBAQhBC,aAAAA,EAAe6B,UAAU,UAAA,CAAA;cAC5BvB,MAAM,WAAA,CAAA;;;;;;;;;;sCAjIdA,MAAM,eAAA,CAAA,GAAA,OAAA,CACP,QAAQ,UAAA,CAAA,CAAA,GAAA,YAAA"}

package/dist/adapters/database/domains/index.d.ts

@@ -10,6 +10,7 @@ export * from './identity-provider-attribute-mapping/index.ts';
 export * from './identity-provider-permission-mapping/index.ts';
 export * from './identity-provider-role-mapping/index.ts';
 export * from './session/index.ts';
+export * from './session-token/index.ts';
 export * from './permission/index.ts';
 export * from './permission-policy/index.ts';
 export * from './policy/index.ts';

package/dist/adapters/database/domains/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/database/domains/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,wCAAwC,CAAC;AACvD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,iDAAiD,CAAC;AAChE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AAErC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/database/domains/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,wCAAwC,CAAC;AACvD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,iDAAiD,CAAC;AAChE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AAErC,cAAc,gBAAgB,CAAC"}

package/dist/adapters/database/domains/index.mjs

@@ -67,6 +67,8 @@ import { RobotSubscriber } from "./robot/subscriber.mjs";
 import "./robot/index.mjs";
 import { SessionEntity } from "./session/entity.mjs";
 import "./session/index.mjs";
+import { SessionTokenEntity } from "./session-token/entity.mjs";
+import "./session-token/index.mjs";
 import { PermissionPolicyEntity } from "./permission-policy/entity.mjs";
 import "./permission-policy/index.mjs";
 import { RobotPermissionEntity } from "./robot-permission/entity.mjs";
@@ -86,4 +88,4 @@ import "./user-permission/index.mjs";
 import { UserRoleEntity } from "./user-role/entity.mjs";
 import { UserRoleSubscriber } from "./user-role/subscriber.mjs";
 import "./user-role/index.mjs";
-export { CachePrefix, ClientEntity, ClientPermissionEntity, ClientPermissionSubscriber, ClientRoleEntity, ClientRoleSubscriber, ClientScopeEntity, ClientScopeSubscriber, ClientSubscriber, IdentityProviderAccountEntity, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeSubscriber, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderRepository, IdentityProviderRoleMappingEntity, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, KeyEntity, PermissionEntity, PermissionPolicyEntity, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyEntity, PolicyRepository, PolicySubscriber, RealmEntity, RealmRepository, RealmSubscriber, RobotEntity, RobotPermissionEntity, RobotPermissionSubscriber, RobotRoleEntity, RobotRoleSubscriber, RobotSubscriber, RoleAttributeEntity, RoleAttributeSubscriber, RoleEntity, RolePermissionEntity, RolePermissionSubscriber, RoleRepository, RoleSubscriber, ScopeEntity, ScopeSubscriber, SessionEntity, UserAttributeEntity, UserAttributeSubscriber, UserEntity, UserPermissionEntity, UserPermissionSubscriber, UserRepository, UserRoleEntity, UserRoleSubscriber, UserSubscriber };
+export { CachePrefix, ClientEntity, ClientPermissionEntity, ClientPermissionSubscriber, ClientRoleEntity, ClientRoleSubscriber, ClientScopeEntity, ClientScopeSubscriber, ClientSubscriber, IdentityProviderAccountEntity, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeSubscriber, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderRepository, IdentityProviderRoleMappingEntity, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, KeyEntity, PermissionEntity, PermissionPolicyEntity, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyEntity, PolicyRepository, PolicySubscriber, RealmEntity, RealmRepository, RealmSubscriber, RobotEntity, RobotPermissionEntity, RobotPermissionSubscriber, RobotRoleEntity, RobotRoleSubscriber, RobotSubscriber, RoleAttributeEntity, RoleAttributeSubscriber, RoleEntity, RolePermissionEntity, RolePermissionSubscriber, RoleRepository, RoleSubscriber, ScopeEntity, ScopeSubscriber, SessionEntity, SessionTokenEntity, UserAttributeEntity, UserAttributeSubscriber, UserEntity, UserPermissionEntity, UserPermissionSubscriber, UserRepository, UserRoleEntity, UserRoleSubscriber, UserSubscriber };

package/dist/adapters/database/domains/session/entity.mjs

@@ -63,7 +63,7 @@ _ts_decorate([
 	Index(),
 	Column({
 		type: "varchar",
-		length: 15
+		length: 45
 	}),
 	_ts_metadata("design:type", String)
 ], SessionEntity.prototype, "ip_address", void 0);

package/dist/adapters/database/domains/session/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","ClientEntity","RobotEntity","RealmEntity","UserEntity","SessionEntity","id","sub","sub_kind","ip_address","user_agent","expires_at","refreshed_at","seen_at","updated_at","created_at","client_id","client","user_id","user","robot_id","robot","realm_id","realm","type","length","nullable","transformer","default","onDelete","name"],"sources":["../../../../../src/adapters/database/domains/session/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column, \n    CreateDateColumn, \n    Entity, \n    Index, \n    JoinColumn, \n    ManyToOne, \n    PrimaryGeneratedColumn, \n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client, \n    Realm, \n    Robot, \n    Session, \n    User,\n} from '@authup/core-kit';\nimport { ClientEntity } from '../client/index.ts';\nimport { RobotEntity } from '../robot/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\n\n@Entity({ name: 'auth_sessions' })\nexport class SessionEntity implements Session {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub_kind: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 15, \n    })\n    ip_address: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 512, \n    })\n    user_agent: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n    })\n    expires_at: string;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    refreshed_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    seen_at: string | null;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    client_id: Client['id'] | null;\n\n    @ManyToOne(() => ClientEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_id' })\n    client: ClientEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    user_id: User['id'] | null;\n\n    @ManyToOne(() => UserEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    robot_id: Robot['id'] | null;\n\n    @ManyToOne(() => RobotEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_id' })\n    robot: RobotEntity | null;\n\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaa,gBAAb,MAAaA;CAETC;CAOAC;CAOAC;CAOAC;CAOAC;CAQAC;CAOAC;CAOAC;CAGAC;CAGAC;CAQAC;CAOAC;CAMAC;CAOAC;CAMAC;CAOAC;CAGAC;CAIAC;AACJ;;;;;EArGQC,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;CAORD,MAAM;CACNC,QAAQ;;;CAKRD,MAAM;CACNC,QAAQ;CACRC,UAAU;;;CAKVF,MAAM;CACNC,QAAQ;CACRC,UAAU;;iCAIMC,aAAa3B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb2B,aAAa3B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;CAM7B0B,UAAU;CACVE,SAAS;;;iBAII3B,cAAAA;EACb4B,UAAU;EACVH,UAAU;;cAEAI,MAAM,YAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAIIxB,YAAAA;EACbyB,UAAU;EACVH,UAAU;;cAEAI,MAAM,UAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAII1B,aAAAA;EACb2B,UAAU;EACVH,UAAU;;cAEAI,MAAM,WAAA,CAAA;;;;;iBAMH3B,aAAAA,EAAe0B,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uCA1GdA,MAAM,gBAAA,CAAA,CAAA,GAAA,aAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","ClientEntity","RobotEntity","RealmEntity","UserEntity","SessionEntity","id","sub","sub_kind","ip_address","user_agent","expires_at","refreshed_at","seen_at","updated_at","created_at","client_id","client","user_id","user","robot_id","robot","realm_id","realm","type","length","nullable","transformer","default","onDelete","name"],"sources":["../../../../../src/adapters/database/domains/session/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column, \n    CreateDateColumn, \n    Entity, \n    Index, \n    JoinColumn, \n    ManyToOne, \n    PrimaryGeneratedColumn, \n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client, \n    Realm, \n    Robot, \n    Session, \n    User,\n} from '@authup/core-kit';\nimport { ClientEntity } from '../client/index.ts';\nimport { RobotEntity } from '../robot/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\n\n@Entity({ name: 'auth_sessions' })\nexport class SessionEntity implements Session {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub_kind: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 45,\n    })\n    ip_address: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 512, \n    })\n    user_agent: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n    })\n    expires_at: string;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    refreshed_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    seen_at: string | null;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    client_id: Client['id'] | null;\n\n    @ManyToOne(() => ClientEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_id' })\n    client: ClientEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    user_id: User['id'] | null;\n\n    @ManyToOne(() => UserEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    robot_id: Robot['id'] | null;\n\n    @ManyToOne(() => RobotEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_id' })\n    robot: RobotEntity | null;\n\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaa,gBAAb,MAAaA;CAETC;CAOAC;CAOAC;CAOAC;CAOAC;CAQAC;CAOAC;CAOAC;CAGAC;CAGAC;CAQAC;CAOAC;CAMAC;CAOAC;CAMAC;CAOAC;CAGAC;CAIAC;AACJ;;;;;EArGQC,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;CAORD,MAAM;CACNC,QAAQ;;;CAKRD,MAAM;CACNC,QAAQ;CACRC,UAAU;;;CAKVF,MAAM;CACNC,QAAQ;CACRC,UAAU;;iCAIMC,aAAa3B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb2B,aAAa3B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;CAM7B0B,UAAU;CACVE,SAAS;;;iBAII3B,cAAAA;EACb4B,UAAU;EACVH,UAAU;;cAEAI,MAAM,YAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAIIxB,YAAAA;EACbyB,UAAU;EACVH,UAAU;;cAEAI,MAAM,UAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAII1B,aAAAA;EACb2B,UAAU;EACVH,UAAU;;cAEAI,MAAM,WAAA,CAAA;;;;;iBAMH3B,aAAAA,EAAe0B,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uCA1GdA,MAAM,gBAAA,CAAA,CAAA,GAAA,aAAA"}

package/dist/adapters/database/domains/session-token/entity.d.ts

@@ -0,0 +1,17 @@
+import type { Session, SessionToken, SessionTokenKind } from '@authup/core-kit';
+import { SessionEntity } from '../session/index.ts';
+export declare class SessionTokenEntity implements SessionToken {
+    id: string;
+    session_id: Session['id'];
+    session: SessionEntity;
+    kind: SessionTokenKind;
+    parent_id: string | null;
+    refresh_token_id: string | null;
+    ip_address: string;
+    user_agent: string;
+    consumed_at: string | null;
+    revoked_at: string | null;
+    expires_at: string;
+    created_at: string;
+}
+//# sourceMappingURL=entity.d.ts.map

package/dist/adapters/database/domains/session-token/entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/session-token/entity.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,qBACa,kBAAmB,YAAW,YAAY;IAEnD,EAAE,EAAE,MAAM,CAAC;IAIX,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAI1B,OAAO,EAAE,aAAa,CAAC;IAOvB,IAAI,EAAE,gBAAgB,CAAC;IASvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAMhC,UAAU,EAAE,MAAM,CAAC;IAMnB,UAAU,EAAE,MAAM,CAAC;IAQnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAO1B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;CACtB"}

package/dist/adapters/database/domains/session-token/entity.mjs

@@ -0,0 +1,95 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { dateToISOStringTransformer } from "../../helpers/date.mjs";
+import "../../helpers/index.mjs";
+import { SessionEntity } from "../session/entity.mjs";
+import "../session/index.mjs";
+import { Column, CreateDateColumn, Entity, Index, JoinColumn, ManyToOne, PrimaryColumn } from "typeorm";
+//#region src/adapters/database/domains/session-token/entity.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+var SessionTokenEntity = class {
+	id;
+	session_id;
+	session;
+	kind;
+	parent_id;
+	refresh_token_id;
+	ip_address;
+	user_agent;
+	consumed_at;
+	revoked_at;
+	expires_at;
+	created_at;
+};
+_ts_decorate([PrimaryColumn({ type: "uuid" }), _ts_metadata("design:type", String)], SessionTokenEntity.prototype, "id", void 0);
+_ts_decorate([
+	Index(),
+	Column({ type: "uuid" }),
+	_ts_metadata("design:type", Object)
+], SessionTokenEntity.prototype, "session_id", void 0);
+_ts_decorate([
+	ManyToOne(() => SessionEntity, { onDelete: "CASCADE" }),
+	JoinColumn({ name: "session_id" }),
+	_ts_metadata("design:type", typeof SessionEntity === "undefined" ? Object : SessionEntity)
+], SessionTokenEntity.prototype, "session", void 0);
+_ts_decorate([
+	Index(),
+	Column({
+		type: "varchar",
+		length: 16
+	}),
+	_ts_metadata("design:type", typeof SessionTokenKind === "undefined" ? Object : SessionTokenKind)
+], SessionTokenEntity.prototype, "kind", void 0);
+_ts_decorate([Column({
+	type: "uuid",
+	nullable: true,
+	default: null
+}), _ts_metadata("design:type", Object)], SessionTokenEntity.prototype, "parent_id", void 0);
+_ts_decorate([Column({
+	type: "uuid",
+	nullable: true,
+	default: null
+}), _ts_metadata("design:type", Object)], SessionTokenEntity.prototype, "refresh_token_id", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 45
+}), _ts_metadata("design:type", String)], SessionTokenEntity.prototype, "ip_address", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 512
+}), _ts_metadata("design:type", String)], SessionTokenEntity.prototype, "user_agent", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 28,
+	nullable: true,
+	default: null
+}), _ts_metadata("design:type", Object)], SessionTokenEntity.prototype, "consumed_at", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 28,
+	nullable: true,
+	default: null
+}), _ts_metadata("design:type", Object)], SessionTokenEntity.prototype, "revoked_at", void 0);
+_ts_decorate([
+	Index(),
+	Column({
+		type: "varchar",
+		length: 28
+	}),
+	_ts_metadata("design:type", String)
+], SessionTokenEntity.prototype, "expires_at", void 0);
+_ts_decorate([CreateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], SessionTokenEntity.prototype, "created_at", void 0);
+SessionTokenEntity = _ts_decorate([Entity({ name: "auth_session_tokens" })], SessionTokenEntity);
+//#endregion
+export { SessionTokenEntity };
+
+//# sourceMappingURL=entity.mjs.map

package/dist/adapters/database/domains/session-token/entity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryColumn","dateToISOStringTransformer","SessionEntity","SessionTokenEntity","id","session_id","session","kind","parent_id","refresh_token_id","ip_address","user_agent","consumed_at","revoked_at","expires_at","created_at","type","onDelete","name","length","nullable","default","transformer"],"sources":["../../../../../src/adapters/database/domains/session-token/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryColumn,\n} from 'typeorm';\nimport type { Session, SessionToken, SessionTokenKind } from '@authup/core-kit';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport { SessionEntity } from '../session/index.ts';\n\n@Entity({ name: 'auth_session_tokens' })\nexport class SessionTokenEntity implements SessionToken {\n    @PrimaryColumn({ type: 'uuid' })\n    id: string;\n\n    @Index()\n    @Column({ type: 'uuid' })\n    session_id: Session['id'];\n\n    @ManyToOne(() => SessionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'session_id' })\n    session: SessionEntity;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 16,\n    })\n    kind: SessionTokenKind;\n\n    // Informational lineage columns (no referential FK — the row is inventory\n    // metadata; the replay reaction is session-scoped, not chain-walked).\n    @Column({\n        type: 'uuid',\n        nullable: true,\n        default: null,\n    })\n    parent_id: string | null;\n\n    @Column({\n        type: 'uuid',\n        nullable: true,\n        default: null,\n    })\n    refresh_token_id: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 45,\n    })\n    ip_address: string;\n\n    @Column({\n        type: 'varchar',\n        length: 512,\n    })\n    user_agent: string;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n        default: null,\n    })\n    consumed_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n        default: null,\n    })\n    revoked_at: string | null;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 28,\n    })\n    expires_at: string;\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,IAAaS,qBAAb,MAAaA;CAETC;CAIAC;CAIAC;CAOAC;CASAC;CAOAC;CAMAC;CAMAC;CAQAC;CAQAC;CAOAC;CAGAC;AACJ;8BAvEqBC,MAAM,OAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,mBAAA,WAAA,MAAA,KAAA,CAAA;;;UAIbA,MAAM,OAAA,CAAA;;;;iBAGCd,eAAAA,EAAiBe,UAAU,UAAA,CAAA;cAC9BC,MAAM,aAAA,CAAA;;;;;;EAKhBF,MAAM;EACNG,QAAQ;;;;;CAORH,MAAM;CACNI,UAAU;CACVC,SAAS;;;CAKTL,MAAM;CACNI,UAAU;CACVC,SAAS;;;CAKTL,MAAM;CACNG,QAAQ;;;CAKRH,MAAM;CACNG,QAAQ;;;CAKRH,MAAM;CACNG,QAAQ;CACRC,UAAU;CACVC,SAAS;;;CAKTL,MAAM;CACNG,QAAQ;CACRC,UAAU;CACVC,SAAS;;;;;EAMTL,MAAM;EACNG,QAAQ;;;;iCAIQG,aAAarB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,mBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;4CAvE3BiB,MAAM,sBAAA,CAAA,CAAA,GAAA,kBAAA"}

package/dist/adapters/database/domains/session-token/index.d.ts

@@ -0,0 +1,2 @@
+export * from './entity.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/database/domains/session-token/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/session-token/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/database/domains/session-token/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { SessionTokenEntity } from "./entity.mjs";
+export { SessionTokenEntity };

package/dist/adapters/database/index.mjs

@@ -51,6 +51,7 @@ import { IdentityProviderRoleSubscriber } from "./domains/identity-provider-role
 import { RobotEntity } from "./domains/robot/entity.mjs";
 import { RobotSubscriber } from "./domains/robot/subscriber.mjs";
 import { SessionEntity } from "./domains/session/entity.mjs";
+import { SessionTokenEntity } from "./domains/session-token/entity.mjs";
 import { PermissionPolicyEntity } from "./domains/permission-policy/entity.mjs";
 import { RobotPermissionEntity } from "./domains/robot-permission/entity.mjs";
 import { RobotPermissionSubscriber } from "./domains/robot-permission/subscriber.mjs";
@@ -70,4 +71,4 @@ import { DataSourceOptionsBuilder } from "./data-source/options/module.mjs";
 import "./data-source/index.mjs";
 import { DatabaseConflictError } from "./errors/conflict.mjs";
 import "./errors/index.mjs";
-export { CachePrefix, ClientEntity, ClientPermissionEntity, ClientPermissionSubscriber, ClientRoleEntity, ClientRoleSubscriber, ClientScopeEntity, ClientScopeSubscriber, ClientSubscriber, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseQueryResultCache, EntitySubscriber, IdentityProviderAccountEntity, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeSubscriber, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderRepository, IdentityProviderRoleMappingEntity, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, KeyEntity, PermissionEntity, PermissionPolicyEntity, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyEntity, PolicyRepository, PolicySubscriber, RealmEntity, RealmRepository, RealmSubscriber, RobotEntity, RobotPermissionEntity, RobotPermissionSubscriber, RobotRoleEntity, RobotRoleSubscriber, RobotSubscriber, RoleAttributeEntity, RoleAttributeSubscriber, RoleEntity, RolePermissionEntity, RolePermissionSubscriber, RoleRepository, RoleSubscriber, ScopeEntity, ScopeSubscriber, SessionEntity, UserAttributeEntity, UserAttributeSubscriber, UserEntity, UserPermissionEntity, UserPermissionSubscriber, UserRepository, UserRoleEntity, UserRoleSubscriber, UserSubscriber, buildEntityDestinations, dateToISOStringTransformer, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment };
+export { CachePrefix, ClientEntity, ClientPermissionEntity, ClientPermissionSubscriber, ClientRoleEntity, ClientRoleSubscriber, ClientScopeEntity, ClientScopeSubscriber, ClientSubscriber, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseQueryResultCache, EntitySubscriber, IdentityProviderAccountEntity, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeSubscriber, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderRepository, IdentityProviderRoleMappingEntity, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, KeyEntity, PermissionEntity, PermissionPolicyEntity, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyEntity, PolicyRepository, PolicySubscriber, RealmEntity, RealmRepository, RealmSubscriber, RobotEntity, RobotPermissionEntity, RobotPermissionSubscriber, RobotRoleEntity, RobotRoleSubscriber, RobotSubscriber, RoleAttributeEntity, RoleAttributeSubscriber, RoleEntity, RolePermissionEntity, RolePermissionSubscriber, RoleRepository, RoleSubscriber, ScopeEntity, ScopeSubscriber, SessionEntity, SessionTokenEntity, UserAttributeEntity, UserAttributeSubscriber, UserEntity, UserPermissionEntity, UserPermissionSubscriber, UserRepository, UserRoleEntity, UserRoleSubscriber, UserSubscriber, buildEntityDestinations, dateToISOStringTransformer, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment };

package/dist/adapters/database/migrations/mysql/1783325495597-Default.d.ts

@@ -0,0 +1,28 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Refresh token rotation + replay detection (plan 016).
+ *
+ * - Widens auth_sessions.ip_address 15 -> 45 (IPv6-sized; the old length was
+ *   IPv4-only, a latent truncation bug).
+ * - Adds auth_session_tokens: one durable row per issued access/refresh token,
+ *   FK to auth_sessions (ON DELETE CASCADE). The row is the authority for
+ *   refresh-token validity (consume/replay/revoke); the cache stays the
+ *   verification fast-path.
+ *
+ * BREAKING: at deploy the table is empty, so every in-flight refresh token has
+ * no row and its first refresh returns invalid_grant — active users
+ * re-authenticate once (hard cutover, RT horizon 3 days).
+ *
+ * down() narrows ip_address back to 15, which fails if any IPv6 value was
+ * stored (best-effort, per the 1779300000000 precedent).
+ *
+ * Also adds auth_clients.post_logout_redirect_uri (plan 042) — a dedicated
+ * OIDC RP-Initiated Logout allow-list, no longer conflated with redirect_uri.
+ * Folded into this still-unreleased migration rather than a new file.
+ */
+export declare class Default1783325495597 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1783325495597-Default.d.ts.map

package/dist/adapters/database/migrations/mysql/1783325495597-Default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1783325495597-Default.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/mysql/1783325495597-Default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,IAAI,SAA0B;IAEjB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAqC3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAyB7D"}

package/dist/adapters/database/migrations/mysql/1783325495597-Default.mjs

@@ -0,0 +1,85 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/mysql/1783325495597-Default.ts
+/**
+* Refresh token rotation + replay detection (plan 016).
+*
+* - Widens auth_sessions.ip_address 15 -> 45 (IPv6-sized; the old length was
+*   IPv4-only, a latent truncation bug).
+* - Adds auth_session_tokens: one durable row per issued access/refresh token,
+*   FK to auth_sessions (ON DELETE CASCADE). The row is the authority for
+*   refresh-token validity (consume/replay/revoke); the cache stays the
+*   verification fast-path.
+*
+* BREAKING: at deploy the table is empty, so every in-flight refresh token has
+* no row and its first refresh returns invalid_grant — active users
+* re-authenticate once (hard cutover, RT horizon 3 days).
+*
+* down() narrows ip_address back to 15, which fails if any IPv6 value was
+* stored (best-effort, per the 1779300000000 precedent).
+*
+* Also adds auth_clients.post_logout_redirect_uri (plan 042) — a dedicated
+* OIDC RP-Initiated Logout allow-list, no longer conflated with redirect_uri.
+* Folded into this still-unreleased migration rather than a new file.
+*/ var Default1783325495597 = class {
+	name = "Default1783325495597";
+	async up(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE \`auth_sessions\` MODIFY \`ip_address\` varchar(45) NOT NULL
+        `);
+		await queryRunner.query(`
+            CREATE TABLE \`auth_session_tokens\` (
+                \`id\` varchar(36) NOT NULL,
+                \`session_id\` varchar(36) NOT NULL,
+                \`kind\` varchar(16) NOT NULL,
+                \`parent_id\` varchar(36) NULL,
+                \`refresh_token_id\` varchar(36) NULL,
+                \`ip_address\` varchar(45) NOT NULL,
+                \`user_agent\` varchar(512) NOT NULL,
+                \`consumed_at\` varchar(28) NULL,
+                \`revoked_at\` varchar(28) NULL,
+                \`expires_at\` varchar(28) NOT NULL,
+                \`created_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
+                INDEX \`IDX_auth_session_tokens_session_id\` (\`session_id\`),
+                INDEX \`IDX_auth_session_tokens_kind\` (\`kind\`),
+                INDEX \`IDX_auth_session_tokens_expires_at\` (\`expires_at\`),
+                PRIMARY KEY (\`id\`)
+            ) ENGINE = InnoDB
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_session_tokens\`
+            ADD CONSTRAINT \`FK_auth_session_tokens_session_id\` FOREIGN KEY (\`session_id\`) REFERENCES \`auth_sessions\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_clients\` ADD \`post_logout_redirect_uri\` text NULL
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE \`auth_clients\` DROP COLUMN \`post_logout_redirect_uri\`
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_session_tokens\` DROP FOREIGN KEY \`FK_auth_session_tokens_session_id\`
+        `);
+		await queryRunner.query(`
+            DROP INDEX \`IDX_auth_session_tokens_expires_at\` ON \`auth_session_tokens\`
+        `);
+		await queryRunner.query(`
+            DROP INDEX \`IDX_auth_session_tokens_kind\` ON \`auth_session_tokens\`
+        `);
+		await queryRunner.query(`
+            DROP INDEX \`IDX_auth_session_tokens_session_id\` ON \`auth_session_tokens\`
+        `);
+		await queryRunner.query(`
+            DROP TABLE \`auth_session_tokens\`
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_sessions\` MODIFY \`ip_address\` varchar(15) NOT NULL
+        `);
+	}
+};
+//#endregion
+export { Default1783325495597 };
+
+//# sourceMappingURL=1783325495597-Default.mjs.map

package/dist/adapters/database/migrations/mysql/1783325495597-Default.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1783325495597-Default.mjs","names":["Default1783325495597","name","up","queryRunner","query","down"],"sources":["../../../../../src/adapters/database/migrations/mysql/1783325495597-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * Refresh token rotation + replay detection (plan 016).\n *\n * - Widens auth_sessions.ip_address 15 -> 45 (IPv6-sized; the old length was\n *   IPv4-only, a latent truncation bug).\n * - Adds auth_session_tokens: one durable row per issued access/refresh token,\n *   FK to auth_sessions (ON DELETE CASCADE). The row is the authority for\n *   refresh-token validity (consume/replay/revoke); the cache stays the\n *   verification fast-path.\n *\n * BREAKING: at deploy the table is empty, so every in-flight refresh token has\n * no row and its first refresh returns invalid_grant — active users\n * re-authenticate once (hard cutover, RT horizon 3 days).\n *\n * down() narrows ip_address back to 15, which fails if any IPv6 value was\n * stored (best-effort, per the 1779300000000 precedent).\n *\n * Also adds auth_clients.post_logout_redirect_uri (plan 042) — a dedicated\n * OIDC RP-Initiated Logout allow-list, no longer conflated with redirect_uri.\n * Folded into this still-unreleased migration rather than a new file.\n */\nexport class Default1783325495597 implements MigrationInterface {\n    name = 'Default1783325495597';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_sessions\\` MODIFY \\`ip_address\\` varchar(45) NOT NULL\n        `);\n\n        await queryRunner.query(`\n            CREATE TABLE \\`auth_session_tokens\\` (\n                \\`id\\` varchar(36) NOT NULL,\n                \\`session_id\\` varchar(36) NOT NULL,\n                \\`kind\\` varchar(16) NOT NULL,\n                \\`parent_id\\` varchar(36) NULL,\n                \\`refresh_token_id\\` varchar(36) NULL,\n                \\`ip_address\\` varchar(45) NOT NULL,\n                \\`user_agent\\` varchar(512) NOT NULL,\n                \\`consumed_at\\` varchar(28) NULL,\n                \\`revoked_at\\` varchar(28) NULL,\n                \\`expires_at\\` varchar(28) NOT NULL,\n                \\`created_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),\n                INDEX \\`IDX_auth_session_tokens_session_id\\` (\\`session_id\\`),\n                INDEX \\`IDX_auth_session_tokens_kind\\` (\\`kind\\`),\n                INDEX \\`IDX_auth_session_tokens_expires_at\\` (\\`expires_at\\`),\n                PRIMARY KEY (\\`id\\`)\n            ) ENGINE = InnoDB\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_session_tokens\\`\n            ADD CONSTRAINT \\`FK_auth_session_tokens_session_id\\` FOREIGN KEY (\\`session_id\\`) REFERENCES \\`auth_sessions\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n\n        // Dedicated post-logout redirect allow-list for OIDC RP-Initiated\n        // Logout (plan 042) — no longer conflated with the login redirect_uri.\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_clients\\` ADD \\`post_logout_redirect_uri\\` text NULL\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_clients\\` DROP COLUMN \\`post_logout_redirect_uri\\`\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_session_tokens\\` DROP FOREIGN KEY \\`FK_auth_session_tokens_session_id\\`\n        `);\n        await queryRunner.query(`\n            DROP INDEX \\`IDX_auth_session_tokens_expires_at\\` ON \\`auth_session_tokens\\`\n        `);\n        await queryRunner.query(`\n            DROP INDEX \\`IDX_auth_session_tokens_kind\\` ON \\`auth_session_tokens\\`\n        `);\n        await queryRunner.query(`\n            DROP INDEX \\`IDX_auth_session_tokens_session_id\\` ON \\`auth_session_tokens\\`\n        `);\n        await queryRunner.query(`\n            DROP TABLE \\`auth_session_tokens\\`\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_sessions\\` MODIFY \\`ip_address\\` varchar(15) NOT NULL\n        `);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;GAuBA,IAAaA,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,MAAMA,YAAYC,MAAM;;SAEvB;EAED,MAAMD,YAAYC,MAAM;;;;;;;;;;;;;;;;;;SAkBvB;EAED,MAAMD,YAAYC,MAAM;;;SAGvB;EAID,MAAMD,YAAYC,MAAM;;SAEvB;CACL;CAEA,MAAaC,KAAKF,aAAyC;EACvD,MAAMA,YAAYC,MAAM;;SAEvB;EAED,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EAED,MAAMD,YAAYC,MAAM;;SAEvB;CACL;AACJ"}

package/dist/adapters/database/migrations/postgres/1783325495597-Default.d.ts

@@ -0,0 +1,28 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Refresh token rotation + replay detection (plan 016).
+ *
+ * - Widens auth_sessions.ip_address 15 -> 45 (IPv6-sized; the old length was
+ *   IPv4-only, a latent truncation bug).
+ * - Adds auth_session_tokens: one durable row per issued access/refresh token,
+ *   FK to auth_sessions (ON DELETE CASCADE). The row is the authority for
+ *   refresh-token validity (consume/replay/revoke); the cache stays the
+ *   verification fast-path.
+ *
+ * BREAKING: at deploy the table is empty, so every in-flight refresh token has
+ * no row and its first refresh returns invalid_grant — active users
+ * re-authenticate once (hard cutover, RT horizon 3 days).
+ *
+ * down() narrows ip_address back to 15, which fails if any IPv6 value was
+ * stored (best-effort, per the 1779300000000 precedent).
+ *
+ * Also adds auth_clients.post_logout_redirect_uri (plan 042) — a dedicated
+ * OIDC RP-Initiated Logout allow-list, no longer conflated with redirect_uri.
+ * Folded into this still-unreleased migration rather than a new file.
+ */
+export declare class Default1783325495597 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1783325495597-Default.d.ts.map

package/dist/adapters/database/migrations/postgres/1783325495597-Default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1783325495597-Default.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/postgres/1783325495597-Default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,IAAI,SAA0B;IAEjB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAqC3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAmB7D"}